You cannot login due to the InResponseTo Check which is faiing.
In the log file you see this error

org.opensaml.common.SAMLException: InResponseToField of the Response doesn't correspond to sent message abcde0123456


When the Application generates an AuthnRequest, it stores the ID of this request. The corresponding response from the IdP must have the InResponseTo attribute set to the same ID value, so the application can verify that the Response is meant for the Request that has been sent. The Application removes this ID once it has been processed.

There are some rare cases that can happen that the Application can not match the ID, such as:


Disable the InResponseTo Check

  1. Goto SAML Configuration
  2. Goto theĀ SP Tab
  3. Check the checkbuttonĀ Disable InToResponse Check

Related articles

Related articles appear here based on the labels you select. Click to edit the macro and add or change labels.

Related issues